1063 matches found
CVE-2019-20182
The FooGallery plugin 1.8.12 for WordPress allow XSS via the posttitle parameter...
The vulnerability of the Firefox browser’s API component, which allows a hacker to replace the user interface
The vulnerability of the Firefox browser’s API is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to replace the user interface using a specially crafted title parameter...
CVE-2017-18639
Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages...
CVE-2019-17489
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemtitle parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create...
CVE-2019-17489
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemtitle parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create...
Design/Logic Flaw
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemtitle parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create...
CVE-2015-9413
The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter...
OKLite 1.2.25 Arbitrary File Deletion Vulnerability
OKLite is a business building system. OKLite 1.2.25 arbitrary file deletion vulnerability, an attacker can modify the title parameter to exploit the vulnerability to delete arbitrary files...
Best Soft Inc.(BSI) Advance Hotel Booking System Cross-Site Scripting Vulnerability
Best Soft Inc.BSI Advance Hotel Booking System is a hotel online booking system from Best Soft India. The system offers modules for hotel booking, room search and discount coupons. A cross-site scripting vulnerability exists in the bookingdetails.php script in the Best Soft Inc. BSI Advance Hotel...
CVE-2019-11825
Cross-site scripting XSS vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
PT-2019-12510 · Synology · Synology Calendar
Name of the Vulnerable Software and Affected Versions: Synology Calendar versions prior to 2.3.0-0615 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title parameter in the Event Editor. Recommendations: For versions...
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
Design/Logic Flaw
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-18872
The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the eventtitle parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creation at the wp-admin/admin.php?page=calendar-categories URI...
CVE-2019-11450
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...
GNUBOARD5 cross-site scripting vulnerability (CNVD-2019-08726)
GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in the newwinform.php file in GNUBOARD5 versions prior to 5.3.1.6, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'title' parameter...